filenametest2.dll
size72527 (0x11b4f)
md548131e51d2cd80425874ea0c99b83504
typePE32+ executable (DLL) (GUI) x86-64, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe8

Rich Header

lib idversiontimes used
156303192
152201151
170303197
147307295
1055
171303195
155303191
157303191

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x8664
NumberOfSections6
TimeDateStamp0x536a4890
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xf0
Characteristics0x2022
Magic0x20b
LinkerVersion10.0
SizeOfCode0x1400
SizeOfInitializedData0x1c00
SizeOfUninitializedData0
AddressOfEntryPoint0x1e98
BaseOfCode0x1000
ImageBase0x180000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.2
ImageVersion0.0
SubsystemVersion5.2
Reserved10
SizeOfImage0x9000
SizeOfHeaders0x400
CheckSum0xb5e1
Subsystem2
DllCharacteristics0x140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MASM/TASM - sig4

Sections

namevavsizeraw sizeflags
.text0x10000x13f20x1400R-X CODE
.rdata0x30000x117f0x1200R-- IDATA
.data0x50000x2300x200RW- IDATA
.pdata0x60000x2100x400R-- IDATA
.rsrc0x70000x1b40x200R-- IDATA
.reloc0x80000x5c0x200R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x40500x12f
IMPORT0x38f40x50
RESOURCE0x70000x1b4
EXCEPTION0x60000x210
SECURITY00
BASERELOC0x80000x34
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x30000x1d0
Delay_IAT00
CLR_Header00
typenamesizecp
MANIFEST#23461252
module_namehintordfunction_name
KERNEL32.dll537GetModuleFileNameA
KERNEL32.dll539GetModuleHandleA
KERNEL32.dll455GetCurrentProcessId
KERNEL32.dll459GetCurrentThreadId
KERNEL32.dll666GetTickCount
KERNEL32.dll937QueryPerformanceCounter
KERNEL32.dll1216Sleep
KERNEL32.dll203DecodePointer
KERNEL32.dll238EncodePointer
KERNEL32.dll640GetSystemTimeAsFileTime
mclmcrrt7_15.dll78array_ref_getV_int_proxy
mclmcrrt7_15.dll283mclcppGetArrayBuffer_proxy
mclmcrrt7_15.dll12array_buffer_set_proxy
mclmcrrt7_15.dll8array_buffer_add_proxy
mclmcrrt7_15.dll281mclcppFeval_proxy
mclmcrrt7_15.dll10array_buffer_get_proxy
mclmcrrt7_15.dll14array_buffer_to_cell_proxy
mclmcrrt7_15.dll163mclFeval_proxy
mclmcrrt7_15.dll215mclGetStackTrace_proxy
mclmcrrt7_15.dll166mclFreeStackTrace_proxy
mclmcrrt7_15.dll183mclGetID_proxy
mclmcrrt7_15.dll272mclTerminateInstance_proxy
mclmcrrt7_15.dll289mclmcrInitialize_proxy
mclmcrrt7_15.dll179mclGetEmbeddedCtfStream_proxy
mclmcrrt7_15.dll226mclInitializeComponentInstanceEmbedded_proxy
mclmcrrt7_15.dll158mclDestroyStream_proxy
mclmcrrt7_15.dll104array_ref_number_of_elements_proxy
mclmcrrt7_15.dll70array_ref_classID_proxy
mclmcrrt7_15.dll284mclcppGetLastError_proxy
mclmcrrt7_15.dll131error_info_get_message_proxy
mclmcrrt7_15.dll436ref_count_obj_release_proxy
mclmcrrt7_15.dll435ref_count_obj_addref_proxy
mclmcrrt7_15.dll279mclcppCreateError_proxy
mclmcrrt7_15.dll277mclWrite_proxy
MSVCR100.dll775_malloc_crt
MSVCR100.dll925_onexit
MSVCR100.dll758_lock
MSVCR100.dll328__dllonexit
MSVCR100.dll1115_unlock
MSVCR100.dll320__clean_type_info_names_internal
MSVCR100.dll238public: void __cdecl type_info::_type_info_dtor_internal_method(void) __ptr64

?_type_info_dtor_internal_method@type_info@@QEAAXXZ

MSVCR100.dll256void __cdecl terminate(void)

?terminate@@YAXXZ

MSVCR100.dll287__CppXcptFilter
MSVCR100.dll286__C_specific_handler
MSVCR100.dll414_amsg_exit
MSVCR100.dll498_encoded_null
MSVCR100.dll1379free
MSVCR100.dll647_initterm_e
MSVCR100.dll646_initterm
MSVCR100.dll93public: virtual __cdecl std::exception::~exception(void) __ptr64

??1exception@std@@UEAA@XZ

MSVCR100.dll296__CxxFrameHandler3
MSVCR100.dll101void __cdecl operator delete(void * __ptr64)

??3@YAXPEAX@Z

MSVCR100.dll37public: __cdecl std::exception::exception(void) __ptr64

??0exception@std@@QEAA@XZ

MSVCR100.dll270_CxxThrowException
MSVCR100.dll36public: __cdecl std::exception::exception(class std::exception const & __ptr64) __ptr64

??0exception@std@@QEAA@AEBV01@@Z

ordentry_vafunction_name
10x1920?test@@YAXXZ
20x1950?testadd@@YAXHAEAVmwArray@@AEBV1@1@Z
30x1570mlxTest
40x15a0mlxTestadd
50x14c0test2GetMcrID
60x1480test2Initialize
70x13a0test2InitializeWithHandlers
80x14d0test2PrintStackTrace
90x14a0test2Terminate
module_nametest2.dll
flags0
timestamp2014-05-07 14:52:00
version0.0
ordinal_base1
nFunctions9
nNames9
Names(9)0x409c
Functions(9)0x4078
NameOrdinals(9)0x40c0
offsetsizetypecomment
15c115HTM#
340051023ZIP#
fb4f8192BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 72527 bytes (71 KiB)


--
Type = zip
WARNINGS:
There are data after the end of archive
Offset = 13312
Physical Size = 51023
Tail Size = 8192

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2014-05-06 14:31:28 D....            0            2  test2_DDFE5DFC3282F945D9C57461215857D5
2014-05-07 07:51:46 .....         2594         2599  toolbox/compiler/compinfo.m
2011-02-18 22:36:32 .....        48128        21405  toolbox/compiler/componentinfo.mexw64
2014-05-07 07:51:46 .....          824          829  toolbox/compiler/ctfroot.m
2010-12-03 18:25:44 .....        10768         3928  toolbox/compiler/ja/xlate
2014-05-07 07:51:46 .....         1529         1534  toolbox/local/hgrc.m
2014-05-07 07:51:46 .....          614          619  toolbox/local/initializeMATLABRoot.m
2014-05-07 07:51:46 .....          944          949  toolbox/local/initprefs.m
2010-05-14 15:40:36 .....         2627         1318  toolbox/local/ja/xlate
2014-05-07 07:51:46 .....         2249         2254  toolbox/local/matlabrc.m
2014-05-07 07:51:46 .....          944          949  toolbox/local/pathdef.m
2014-05-07 07:51:46 .....          854          859  toolbox/local/printopt.m
2014-05-07 07:51:46 .....          659          664  toolbox/local/private/p_initializeMATLABRoot.m
2014-05-07 07:51:46 .....         1469         1474  toolbox/local/userpath.m
2014-05-07 07:51:48 .....           54           53  toolbox/compiler/Contents.m
2014-05-07 07:51:48 .....         7184         1524  .META/manifest.xml
2014-05-07 07:51:48 .....           55           53  toolbox/local/Contents.m
2014-05-07 07:51:48 .....          644          649  toolbox/compiler/componentinfo_mexw64.auth
2014-05-07 07:51:48 .....          809          814  toolbox/compiler/system_dependent.m
2014-05-07 06:22:20 .....          372          184  .matlab/MATLAB_Editor_State.xml
2014-05-07 07:46:04 .....          101           81  .matlab/MATLAB_Help_Browser_State.xml
2014-05-06 14:46:34 .....           40           42  .matlab/MLintDefaultSettings.txt
2014-05-06 14:45:48 .....         4349         1397  .matlab/compopts.bat
2014-05-07 07:48:20 .....          159          105  .matlab/deploytool_toolbar_9b.xml
2014-05-07 07:48:20 .....          325          150  .matlab/deploytool_toolbar_plugin.deploytool_p.xml
2014-05-07 07:46:02 .....          203          117  .matlab/help_browser_toolbar.xml
2014-05-07 07:50:08 .....         1783          651  .matlab/matlab.prf
2014-05-07 06:22:18 .....         3535          563  .matlab/plotpickercache.xml
2014-05-07 07:51:48 .....          614          619  test2/test.m
2014-05-07 07:51:48 .....          629          634  test2/testadd.m
------------------- ----- ------------ ------------  ------------------------
2014-05-07 07:51:48              95059        47019  29 files, 1 folders

Warnings: 1
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







everything is OK